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Abstract 



When numbers are added in base b in the usual way, carries occur. If two random, independent 



1-digit numbers are added, then the probability of a carry is Other choices of digits lead to 

less carries. In particular, if for odd b we use the digits {— (b — l)/2, — (6 — 3)/2, ....... (b — l)/2} 

then the probability of carry is only 4fc2 . Diaconis, Shao and Soundararajan conjectured that this 
is the best choice of digits, and proved that this is asymptotically the case when b = p is a large 
prime. In this note we prove this conjecture for all odd primes p. 
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1 The problem and result 

When numbers are added in base b in the usual way, carries occur. If two added one-digit numbers 
are random and independent, then the probability of a carry is Other choices of digits lead to 
less carries. In particular, if for odd b we use balanced digits, that is, the digits 

{-(& - l)/2, -(b - 3)/2, . . . , 0, 1, 2, . . . (b - l)/2} 

then the probability of carry is only ^Zg 1 - Diaconis, Shao and Soundararajan [3] conjectured that this 
is the best choice of digits, and proved that this conjecture is asymptotically correct when b = p is a 
large prime. More precisely, they proved the following. 

Theorem 1.1 (|4j) For every e > there exists a number pq = po(e) so that for any prime p > po 
the probability of carry when adding two random independent one-digit numbers using any fixed set of 
digits in base p is at least -? — e. 

The estimate given in [1] to po = po(e) is a tower function of 1/e. 

Here we establish a tight result for any prime p, proving the conjecture for any prime. 

Theorem 1.2 For any odd prime p, the probability of carry when adding two random independent 
one-digit numbers using any fixed set of digits in base p is at least ■ 
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The proof is very short, and is in fact mostly an observation that the above result follows from a 
theorem of J. M. Pollard proved in the 70s. The conjecture for non-prime values of p remains open. 

The proof can be extended to show that balanced digits minimize the probability of carry while 
adding k numbers, for any k > 2. 

The rest of this short note is organized as follows. The next section contains a brief description 
of the digit systems considered. In Section 3 we present the short derivation of Theorem 11.21 from 
Pollard's Theorem, and in Section 4 we describe the proof of the extension to the addition of more 
than two summands. 

2 Addition and choices of digits 

A simple example illustrating the advantage of using digits that minimize the probability of carry is 
that of adding numbers in the finite cyclic group Z b 2. Here the basis used is b. Since Z b 2 is a finite 
group, one can choose random members of it g±, g2, ■ ■ ■ , g n uniformly and independently and consider 
their sum in Z b 2. Following the discussion in Section 6 of [lj, consider the normal subgroup Z b < Z b 2, 
where Z b is the subgroup of Z b 2 consisting of the elements {0, b, 2b, . . . , (b — l)b}. 

Let A C Z b 2 be a set of representatives of the cosets of Z b in Z b 2. Therefore |^4| = b and no two 
elements of A are equal modulo b. These are the digits we use. Any element g G Z b 2 now has a 
unique representation of the form g = x + y, where x G A and y G Z b . Indeed, x is the member of A 
representing the coset of Z b that contains g, and y G Z b is determined by the equality g = x + y. 

Suppose, now that gi = xi + yi with Xi G A and yi G Z b is the representation of n elements gi of 
Z b 2 that we wish to sum. We start by computing g\ + 92- To do so one first adds x\ + X2 (in Z b 2). 
If their sum, call it Z2, is a member of A, then there is no carry in this stage. We can then compute 
the sum y\ + ?/2 in Z b , and get W2 (in this stage there is no carry, as the addition here is modulo 
b). Therefore, in this case the representation of g\ + g2 using our digits is 51+92 = ^2 + ^2 with 
Z2 G A and W2 G Z p , and we can now proceed by induction and compute the sum of this element with 
93 + 9a + • • • + 9n- If) on the other hand, x\ + X2 G" A then there is a carry. In this case we let Z2 
be the unique member of A so that x\ + X2 lies in the coset of Z b containing Z2- This determines the 
element £2 G Z b so that x\ + X2 = 212+^2- The carry here is t2, and we can now proceed and compute 
the sum t2 + yi + y2 in Z b getting an element W2- Therefore in this case too the unique representation 
of gi + 92 using our digits is Z2 + W2 , but since the process of computing them involved the carry £2 
the number of additions performed during the computation in the group Z b was 2 and not 1 as in the 
case that involved no carry. 

As g\ and 92 are random independent elements chosen uniformly in Z b 2 , their sum is also uniform 
in this group, implying that the element Z2 + u>2 is also uniform. Therefore, when we now proceed and 
compute the sum of this element with 93 the probability of carry is again exactly as it has been before 
(though the conditional probability of a carry given that there has been one in the previous step may 
be different). We conclude that the expected number of carries during the whole process of adding 
9\ + 92 + ■ ■ ■ + 9n that consist of n — 1 additions is exactly (n — 1) times the probability of getting a 
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carry in one addition of two independent uniform random digits in the set A. 

Therefore, the problem of minimizing the expected number of these carries is that of selecting the 
set of coset representatives A so that the probability that the addition of two random members of A 
in Z b 2 does not lie in A is minimized. 

This leads to the following equivalent formulation of Theorem 11.21 

Theorem 2.1 Let p be an odd prime. For any subset A of the group Z„2 of integers modulo p 2 so that 
\A\ = p and the members of A are pairwise distinct modulo p, the number of ordered pairs (a,b) GAxA 
so that a + b {mod p 2 ) A is at least 

3 Adding two numbers 

The result of Pollard needed here is the following. 

Theorem 3.1 (Pollard |7J) For an integer m and two sets A and B of residues modulo m, and for 
any positive integer r, let N r = N r {A,B) denote the number of all residues modulo m that have a 
representation as a sum a + b with a € A and b € B in at least r ways. (The representations are 
counted as ordered pairs, that is, if a and b differ and both belong to AnB, then a + b = b + a are two 
distinct representations of the sum). If {x — y, m) = 1 for any two distinct elements x,y € B then for 
any 1 < r < min{|^4|, |-E>|}.' 

Ni + N 2 H h N r > r ■ min{m, \A\ + \B\ - r}. 

Note that the case r = 1 is the classical theorem of Cauchy and Davenport (see [2], [3]). The proof is 
short and clever, following the approach in the original papers of Cauchy and Davenport. It proceeds 
by induction on \B\, where in the induction step one first replaces B by a shifted copy B' = B — g so 
that I = A f] B' satisfies 1 < |/| < \B'\ = \B\, and then applies the induction hypothesis to the pair 
(A U B', I) and to the pair (A — I,B' — I). The details can be found in [7] (see also [6]). 

Proof of Theorem ll.2t As mentioned above, the statement of Theorem 11.21 is equivalent to that 
of Theorem 12.11 for any subset A of the group Z p 2 of integers modulo p 2 so that |^4| = p and the 
members of A are pairwise distinct modulo p, the number of ordered pairs (a, b) € A x A so that 
a + b {mod p 2 ) A is at least P 7 1 . 

Given such a set A, note that {x — y,p 2 ) = 1 for every two distinct elements x, y G A. We can thus 
apply Pollard's Theorem stated above with m = p 2 , A = B and r = {p — l)/2 to conclude that 

Ni + N 2 H \-N r >r- min{p 2 , \A\ + \B\ - r} = r ■ {2p - r). 

The sum Ni + N 2 + - ■ - + N r counts every element x € Z p 2 exactly min{r, n{x)} times, where n{x) is the 
number of representations of x as an ordered sum a+b with a, b € A. The total contribution to this sum 
arising from elements x £ A is at most r\A\ = rp. Therefore, there are at least r{p—r) = ^y^^p = ^~ir~ 
ordered pairs (a, b) G A x A so that a + b ^ A, completing the proof. □ 
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Remark: The above proof shows that even if we use one set of digits for one summand, a possibly 
different set of digits for the second summand, and a third set of digits for the sum, then still the 
probability of carry must be at least KZs' - 

4 Adding more numbers 

The theorem of Pollard is more general than the statement above and deals with addition of k > 2 sets 
as well. This can be used in determining the minimum possible probability of carry in the addition 
of k random 1-digit numbers in a prime base p with the best choice of the p digits. In fact, for 
every k and every odd prime p, the minimum probability is obtained by using the balanced digits 
{— (p— l)/2, — (p — 3/2, . . . , (p— l)/2}. Therefore, the minimum possible probability of carry in adding 
k 1-digit numbers in a prime base p > 2 is exactly the probability that the sum of k independent 
random variables, each distributed uniformly on the set 

{-(p-l)/2,-(p-3/2,...,(p-l)/2}, 

is of absolute value exceeding (p — l)/2. 

Here are the details. We need the following. 

Theorem 4.1 (Pollard |7J) Let m be a positive integer and let A\, A2, ■ ■ ■ , A^ be subsets of Z m . 
Assume, further, that for every 2 < i < k every two distinct elements x,y of Ai satisfy (x — y,m) = 1. 
Let A^A'2, . . . , A' k be another collection of subsets of Z m , in which each A\ consists of consecutive 
elements and satisfies \A^\ = \Ai\. For an x € Z m let n(x) denote the number of representations of x 
as an ordered sum of the form x = a\ + 02 + . . . + a& with ai G Ai, and let n'{x) denote the number of 
representations of x as an ordered sum of the form x = a' x + a' 2 + • • • + a' k with a\ £ A\ for all i . Then, 
for any integer r > 1 

min{r, n(x)}> min{r, n'{x)}. 

xez m xez m 

Corollary 4.2 Let p be an odd prime, and let A be a subset of cardinality p of Z p 2. Assume, further, 
that the members of A are pairwise distinct modulo p. Put A' = {— (p — 1)/2, — (p — 3)/2, . . . , (p — 1)/2}. 
Then, for any positive integer k, the number of ordered sums modulo p 2 of k elements of A that do 
not belong to A is at least as large as the number of ordered sums modulo p 2 of k elements of A' that 
do not belong to A' . 

Proof: Let r be the number of ordered sums modulo p 2 of k elements of A' whose value is precisely 
(p — l)/2. It is not difficult to check that for any other member g of A' there are at least r ordered 
sums modulo p 2 of k elements of A' whose value is precisely g. Similarly, for any x ^ A', the number of 
ordered sums of k elements of A' whose value is precisely x is at most r. Indeed, the number of times 
an element is obtained as an ordered sum modulo p 2 of k elements of A' is a monotone non-increasing 
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function of its distance from 0. (This can be easily proved by induction on k). Therefore, 

mm{r, n'(x)} = rp + n'{x). 

x&Z p2 xdZ v 2-A' 

By Theorem 14. 1 1 with m = p 2 , A\ = A2 = ■ ■ ■ = A^ = A and the value of r above 

min{r, 11 (x)} > min{r, n(x)}. 



x&z p2 *£ Z p2 



However, clearly, 



r P + n(x) > min{r, n(x)}, 



and therefore 

r P + n(x) > min{r, n'(a;)} = rp + n'(x). 

xeZ p2 -A xez p2 x&Z p2 -A' 

This implies that 

^2 n(x) > ^2 n'(x), 

xeZ p2 -A x£Z p2 -A> 

as needed. □ 

The corollary clearly implies that the minimum possible probability of carry in adding k 1-digit 
numbers in a prime base p > 2 is exactly the probability that the sum of k independent random 
variables, each distributed uniformly on the set 

{-(p-l)/2,-(p-3/2,...,(p-l)/2} } 

is of absolute value exceeding (p — l)/2. 
Remarks: 

• As in the case of two summands, the proof implies that the assertion of the last paragraph holds 
even if we are allowed to choose a different set of digits for each summand and for the result. 

• After the completion of this note I learned from the authors of [3] that closely related results 
(for addition in Z p , not in Z p 2) appear in the paper of Lev [S]. 
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